Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File:                     sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier:          WohKFA4Ymx+v6Gm+3wRqX9vvWO0KXuKLZ9MmOOzQ7oc=
Subject key identifier:   B9:19:82:9D:8C:46:9C:50:CA:C2:0D:C2:8C:E6:07:8E:BE:70:75:3D
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer:       /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial:       01962F3DCB8F740F07E343909C1CD699F2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
                          2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
                          3: kP9aQuI7wcHVXgn-kDSiHGt-vho.roa (hash: bFJwlfQvVNTaFKApBOi3yPTTEB3m1CFWEgGCK1vAL44=)
                          4: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: Pv7JMAet3TNt3rsUXc3V/9xKGVZ42vxhWlVirUkYeog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cb:8f:74:0f:07:e3:43:90:9c:1c:d6:99:f2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=b919829d8c469c50cac20dc28ce6078ebe70753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:dc:dd:73:a5:8c:a6:75:7d:fc:a6:d3:19:
                    fa:78:24:8f:39:60:25:55:bf:6c:1f:36:f0:3b:78:
                    e4:ab:1d:c1:90:c6:ab:b0:db:18:f1:b0:9e:0a:30:
                    f3:69:0c:fe:d7:86:67:73:a1:5f:cd:bf:95:02:4b:
                    75:34:34:47:0f:81:37:1f:64:73:37:31:72:48:80:
                    33:f0:e3:c6:a0:31:97:8c:e8:d9:fc:21:83:b9:d0:
                    c7:d0:06:76:a1:fb:f4:6b:e1:2b:f4:28:28:9c:d7:
                    1b:55:25:2d:90:37:7b:bf:0b:0f:02:04:73:70:6e:
                    db:44:e2:87:a1:74:d8:d9:bf:9b:7c:c1:96:4f:f8:
                    a7:0c:c4:fd:e7:a9:92:d2:72:1e:e0:fa:d4:63:3b:
                    b6:e2:07:b9:ce:e4:64:aa:bb:f3:59:8b:42:3b:ac:
                    55:f4:03:64:37:fd:95:89:45:97:8e:29:5e:49:14:
                    37:5c:75:32:6f:f7:76:5b:4c:00:af:c9:97:a7:4d:
                    c7:e3:7b:18:f0:85:85:8b:59:5e:29:cf:fe:4a:86:
                    b2:e5:07:bf:d4:51:a9:fd:bc:d4:87:3c:21:1b:ba:
                    a6:a4:a5:0d:2c:5a:e5:49:28:56:f4:5e:ee:17:4b:
                    3d:f3:11:2d:c1:72:f3:6d:ef:b9:e2:80:2b:69:4d:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:82:9D:8C:46:9C:50:CA:C2:0D:C2:8C:E6:07:8E:BE:70:75:3D
            X509v3 Authority Key Identifier:
                keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:4e:e8:35:50:36:c6:14:60:73:43:36:6f:56:4b:14:7d:
         ee:fc:9a:73:da:0b:e5:bd:8c:3a:b4:83:58:d2:1c:34:d7:c9:
         59:17:86:44:8e:4e:bc:dd:d4:aa:56:c9:17:43:43:73:57:7a:
         d2:09:2f:98:2b:41:30:d5:57:17:8e:71:ed:36:7b:99:f3:76:
         91:ad:ee:d1:88:72:8d:37:89:dc:b8:95:2d:c5:e6:58:07:df:
         50:ed:78:9c:a8:e2:22:1e:64:78:c9:36:98:3b:c3:86:06:26:
         4a:ac:89:30:9d:75:db:7a:c0:2e:f7:00:c7:e6:f8:18:d9:37:
         dd:99:08:ff:62:3b:57:c6:db:71:d0:e5:30:23:0c:27:87:85:
         eb:43:0f:98:2e:da:30:78:0e:f8:5d:4e:7c:b6:94:63:ad:96:
         af:81:8f:3a:9c:a0:90:77:00:88:a3:70:38:3c:e6:55:66:a2:
         3b:84:02:69:3f:2b:fd:f8:de:4f:63:07:2e:bf:60:5e:db:06:
         78:04:5a:f2:53:cf:66:56:30:f5:7b:e0:3b:0c:63:d8:ff:4a:
         78:57:2f:be:b5:23:8a:60:5d:41:e5:42:af:26:44:59:f1:01:
         33:c7:37:ef:94:43:a2:72:b6:20:42:32:0c:ff:b2:36:60:79:
         9d:57:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----